generated: '2026-07-18'
method: probed
probe: true
source: DNS CAA record for bastion.com
contact:
- mailto:security@bastion.com
policy: []
evidence:
- source: 'CAA bastion.com: 0 iodef "mailto:security@bastion.com"'
  kind: security-contact
  keywords:
  - iodef
  - security@bastion.com
notes: >-
  No published /.well-known/security.txt (404 on bastion.com, 401 on
  api.prod.bastion.com) and no public responsible-disclosure page were found
  (docs are password-gated). The only machine-readable security contact located
  is the CAA `iodef` incident-reporting address security@bastion.com.